fix(gitlab-ci): pin tox and poetry requirements

Currently the most recent tox and poetry don't play nicely when installed together since they specify irreconcilable dependencies. Pin a combination which do work.